❌ International Authorities Take Down Flubot Malware Network ❌
📖 Read
via "Threat Post".
The info-stealing trojan used SMS messages and lifted contact credentials to spread with unprecedented speed across Android devices globally since December 2020.📖 Read
via "Threat Post".
Threat Post
International Authorities Take Down Flubot Malware Network
The info-stealing trojan used SMS messages and lifted contact credentials to spread with unprecedented speed across Android devices globally since December 2020.
❌ Scammers Target NFT Discord Channel ❌
📖 Read
via "Threat Post".
Hackers escalate phishing and scamming attacks to exploit popular Discord bot and persuade users to click on the malicious links.📖 Read
via "Threat Post".
Threat Post
Scammers Target NFT Discord Channel
Hackers escalate phishing and scamming attacks to exploit popular Discord bot and persuade users to click on the malicious links.
❌ Cybercriminals Expand Attack Radius and Ransomware Pain Points ❌
📖 Read
via "Threat Post".
Melissa Bischoping, security researcher with Tanium and Infosec Insiders columnist, urges firms to consider the upstream and downstream impact of "triple extortion" ransomware attacks.📖 Read
via "Threat Post".
Threat Post
Cybercriminals Expand Attack Radius and Ransomware Pain Points
Melissa Bischoping, security researcher with Tanium and Infosec Insiders columnist, urges firms to consider the upstream and downstream impact of "triple extortion" ransomware attacks.
🕴 Neutralizing Novel Trickbot Attacks With AI 🕴
📖 Read
via "Dark Reading".
Artificial intelligence technology can detect the latest wave of Trickbot ransomware and block the attack before it causes damage.📖 Read
via "Dark Reading".
Dark Reading
Neutralizing Novel Trickbot Attacks With AI
Artificial intelligence technology can detect the latest wave of Trickbot ransomware and block the attack before it causes damage.
👍1
🕴 Fighting Follina: Application Vulnerabilities and Detection Possibilities 🕴
📖 Read
via "Dark Reading".
Although organizations should perform proper risk analysis and patch as soon as practical after there's a fix for this vulnerability, defenders still have options before that's released.📖 Read
via "Dark Reading".
Dark Reading
Fighting Follina: Application Vulnerabilities and Detection Possibilities
Although organizations should perform proper risk analysis and patch as soon as practical after there's a fix for this vulnerability, defenders still have options before that's released.
⚠ Yet another zero-day (sort of) in Windows “search URL” handling ⚠
📖 Read
via "Naked Security".
More trouble with special-purpose URLs on Windows.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 'Clipminer' Malware Actors Steal $1.7 Million Using Clipboard Hijackingp 🕴
📖 Read
via "Dark Reading".
The malware targets Windows users via Trojanized downloads of cracked or pirated software and then starts in on cryptocurrency mining and clipboard hijacking.📖 Read
via "Dark Reading".
Dark Reading
'Clipminer' Malware Actors Steal $1.7 Million Using Clipboard Hijacking
The malware targets Windows users via Trojanized downloads of cracked or pirated software and then starts in on cryptocurrency mining and clipboard hijacking.
⚠ Yet another zero-day (sort of) in Windows “search URL” handling ⚠
📖 Read
via "Naked Security".
More trouble with special-purpose URLs on Windows.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ S3 Ep85: Now THAT’S what I call a Microsoft Office exploit! [Podcast] ⚠
📖 Read
via "Naked Security".
Latest episode - listen now!📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
‼ CVE-2022-27780 ‼
📖 Read
via "National Vulnerability Database".
The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For example, a URL like `http://example.com%2F127.0.0.1/`, would be allowed bythe parser and get transposed into `http://example.com/127.0.0.1/`. This flawcan be used to circumvent filters, checks and more.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2022-29653 ‼
📖 Read
via "National Vulnerability Database".
OFCMS v1.1.4 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/comn/service/update.json.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29659 ‼
📖 Read
via "National Vulnerability Database".
Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30819 ‼
📖 Read
via "National Vulnerability Database".
In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "photos_edit.php" file.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29711 ‼
📖 Read
via "National Vulnerability Database".
LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26974 ‼
📖 Read
via "National Vulnerability Database".
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload mechanism. Lack of input sanitization in the upload mechanism leads to reflected XSS.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29729 ‼
📖 Read
via "National Vulnerability Database".
Verizon 4G LTE Network Extender GA4.38 - V0.4.038.2131 utilizes a weak default admin password generation algorithm which generates passwords that are accessible to unauthenticated attackers via the webUI login page.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30825 ‼
📖 Read
via "National Vulnerability Database".
Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\client_edit.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30490 ‼
📖 Read
via "National Vulnerability Database".
Badminton Center Management System V1.0 is vulnerable to SQL Injection via parameter 'id' in /bcms/admin/court_rentals/update_status.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26971 ‼
📖 Read
via "National Vulnerability Database".
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. This upload can be executed without authentication.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26976 ‼
📖 Read
via "National Vulnerability Database".
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization in the upload mechanism is leads to reflected XSS.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26491 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The client will perform TLS certificate verification of the malicious domain name instead of the original XMPP service domain, allowing the attacker to take over control over the XMPP connection and to obtain user credentials and all communication content. This is similar to CVE-2022-24968.📖 Read
via "National Vulnerability Database".